Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/C9rTZ6_iu1FXRg451e341Atg3Z0.roa
File: C9rTZ6_iu1FXRg451e341Atg3Z0.roa (raw, json)
Hash identifier: XcWEYMD9cUcIh2EC0BBKyyITu1rFp8td9cXo80ANEyQ=
Subject key identifier: 0B:DA:D3:67:AF:E2:BB:51:57:46:0E:39:D5:ED:F8:D4:0B:60:DD:9D
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019424456B3F4D7DB156373072A2448B37A5
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/C9rTZ6_iu1FXRg451e341Atg3Z0.roa
Signing time: Wed 01 Jan 2025 23:48:36 +0000
ROA not before: Wed 01 Jan 2025 23:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207904
IP address blocks: 213.0.76.0/24 maxlen: 24
213.0.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6b:3f:4d:7d:b1:56:37:30:72:a2:44:8b:37:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bdad367afe2bb5157460e39d5edf8d40b60dd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:7e:9e:57:1a:d7:14:0c:88:a4:a3:fe:97:
30:8f:65:38:80:1f:16:14:0a:b7:62:60:70:65:7d:
eb:a3:51:86:b5:b6:a9:54:fe:86:e1:0e:ec:6e:4e:
22:5d:eb:85:bf:9e:dd:0e:ba:e3:3f:8d:9d:7d:56:
dd:f8:83:6b:d8:ac:e2:29:41:30:1e:2a:ec:12:b9:
1f:ea:b3:4d:e5:bb:6d:0b:4f:91:f1:58:fa:04:8e:
28:0f:85:47:bf:d9:87:34:88:44:82:a0:75:d7:d8:
fb:da:fc:37:57:b6:1f:60:f4:96:30:26:42:d3:42:
81:c1:c9:b0:f8:a6:9f:a6:c2:94:de:8a:65:51:40:
29:fe:8f:4f:dd:4a:17:e7:5b:4d:a5:b8:14:8d:ab:
cb:b5:b7:2a:fa:e0:ed:9e:bb:75:af:de:a9:45:07:
a5:63:39:d6:4b:2d:06:3f:6f:e8:78:1d:db:c4:3d:
b9:3e:ca:d1:b6:f0:c2:87:ec:70:a4:d1:28:2f:2e:
ad:f5:63:8c:d9:a9:4c:73:ec:06:26:01:2e:94:82:
3c:13:9b:2b:2e:09:4f:ec:78:10:27:cc:0b:9b:63:
a7:fe:b2:60:bf:40:e6:88:b9:da:72:50:70:67:90:
ba:57:0f:36:2a:d3:57:48:c5:14:a5:1d:cd:7e:3e:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DA:D3:67:AF:E2:BB:51:57:46:0E:39:D5:ED:F8:D4:0B:60:DD:9D
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/C9rTZ6_iu1FXRg451e341Atg3Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.0.76.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:cc:84:a3:0f:37:16:b0:92:33:a4:11:81:14:0f:bf:88:df:
42:93:a6:15:9d:84:30:15:1a:aa:fc:60:0c:ea:da:b4:b9:23:
0a:66:50:87:fe:81:69:54:56:08:de:9d:2b:89:f2:3d:d0:3e:
2f:ae:13:27:f1:48:03:0d:62:1b:b9:c1:71:1d:98:f1:ad:2b:
0a:3a:b1:08:08:d7:76:5a:50:3f:67:9f:96:2a:13:3b:9e:4d:
77:8b:f0:bc:15:36:36:22:dc:c9:20:8a:9a:45:19:43:7c:e5:
fc:21:1b:7f:5d:94:10:74:5c:a1:24:3b:d7:5c:e1:c1:21:eb:
e9:e5:83:74:0d:b9:d2:ce:ca:40:97:e5:fe:5b:ac:3a:eb:40:
0d:a0:37:f2:fd:4f:5e:29:16:04:fe:df:89:4d:b6:24:85:48:
95:52:ab:da:4a:af:04:80:c1:ab:9a:b4:0a:0a:21:22:b2:2a:
f0:49:74:70:21:99:53:1b:14:4c:b3:74:d4:72:e2:77:64:30:
44:bf:0e:28:57:e4:a8:03:99:b9:4e:a1:4b:36:da:91:b3:42:
39:31:ab:fb:48:8c:01:69:c0:95:84:77:cd:7a:d1:66:43:fb:
2f:37:af:5c:9c:0b:23:47:1a:92:cc:ac:b4:79:c5:f5:8d:6c:
da:f1:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:44:23 2025 by rpki-client